Threat Analyst (Remote, ROU)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed - we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily . Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

• Provide assistance to various internal teams in the creation of new detections, improvements to existing models, and assessment of detection gaps related to various CrowdStrike products.
• Document and offer expert-level information to diverse stakeholders regarding content detections within CrowdStrike Falcon.
• Support customers and teams in enhancing or suppressing detection alerts.
• Develop new detection content based on adversarial or testing activity observed in logs.

• Comprehensive understanding of common adversary tactics and techniques.
• Demonstrated ability to analyze complex situations and articulate information clearly to diverse stakeholders.
• Profound understanding of and ability to interpret logs generated by systems, networks, and applications.
• Proven experience in identifying and isolating unique patterns within process behavior or logs (e.g., RegEx, correlation rules, YARA).
• Prior experience with EDR products and endpoint security monitoring.
• Expertise in and understanding of Windows, Linux, and MacOSX operating systems.
• Capacity to contribute both independently and collaboratively within a team environment.
• Possess an inquisitive nature and the ability to conduct thorough research using historical data.
• Exhibit a keen eye for documenting pertinent details and facilitating focused discussions.
• Eagerness to acquire new knowledge and skills.

• Experience in a security operations center or similar environment responding to incidents.
• Demonstrated ability to automate repetitive tasks to enhance overall work efficiency.
• In-depth experience with and knowledge of penetration testing (red team) methodologies and tools.
• Forensic experience is highly desirable.
• Proficiency in utilizing Jira for the management and maintenance of development queues.
• Working knowledge of various programming/scripting languages, dynamic malware analysis and sandboxing, and/or penetration testing tools and techniques.
• Good understanding of the application development life cycle (SDLC).

• BA/BS or MA/MS degree or equivalent experience in Computer Science, Information Security, or a related field

• Remote-friendly and flexible work culture
• Market leader in compensation and equity awards
• Comprehensive physical and mental wellness programs
• Competitive vacation and holidays for recharge
• Paid parental and adoption leaves
• Professional development opportunities for all employees regardless of level or role
• Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
• Vibrant office culture with world class amenities
• Great Place to Work Certified™ across the globe